Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b4ebce5-b86a-38bd-8e7f-91cd489dbd32.roa
File:                     4b4ebce5-b86a-38bd-8e7f-91cd489dbd32.roa (raw, json)
Hash identifier:          Gcyj6bDFdi2Z7fRqvlUHWbGKKEPzAmMjzNPDjpqSrzo=
Subject key identifier:   CC:B7:35:1F:F9:71:5B:51:5A:E6:45:50:99:45:79:58:DC:D6:0D:23
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B64CCB5CEF8AD1CF0BEE30B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b4ebce5-b86a-38bd-8e7f-91cd489dbd32.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     396542
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:b5:ce:f8:ad:1c:f0:be:e3:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=f877b2fc-003a-4459-ab68-48f770b707db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2c:90:c0:57:d7:e0:32:28:37:94:7d:d8:e2:
                    04:1a:51:6d:ff:89:49:c6:31:b4:d7:2d:bb:e6:c3:
                    ce:b2:9b:90:d5:f2:15:2e:7c:42:85:fe:9f:04:86:
                    cd:95:79:3f:20:71:93:73:7e:59:94:47:16:89:b3:
                    0e:f3:cc:79:16:33:75:c4:c8:7a:17:20:e1:ed:0b:
                    1f:23:1e:14:5b:be:18:f0:c9:9f:e1:bc:ac:89:6b:
                    0e:12:93:e9:52:a1:7c:74:d2:5f:ef:26:53:7c:f3:
                    27:64:a5:20:a0:9f:54:b8:29:9c:b8:6e:e5:09:25:
                    97:b2:00:09:0d:b2:48:9a:3d:96:66:64:a9:99:ef:
                    17:a2:6d:d2:6d:a0:9a:b7:bc:ef:1e:a1:60:0d:f4:
                    83:dc:3f:54:b1:9f:c2:98:0d:ea:f7:f4:cf:89:d7:
                    1e:6f:e4:a3:0f:8a:f2:30:e0:62:30:43:d2:b0:ff:
                    90:49:94:47:6f:3d:63:08:d7:a5:25:b8:33:07:ab:
                    1d:05:ec:c1:d4:9d:02:63:92:94:16:7c:98:92:0d:
                    9e:ce:79:cd:a0:3a:38:59:cc:d8:4f:1e:42:01:6b:
                    d0:a3:6d:47:45:e2:59:c8:65:5c:63:9c:d5:d2:1a:
                    20:dd:7e:d0:9a:b2:53:5d:55:73:e2:e3:e9:db:24:
                    b7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B7:35:1F:F9:71:5B:51:5A:E6:45:50:99:45:79:58:DC:D6:0D:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b4ebce5-b86a-38bd-8e7f-91cd489dbd32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:1c:2c:3f:1c:ac:63:2d:7e:31:d5:b8:a8:1e:ff:52:cf:6a:
         a1:31:4b:b0:62:2c:17:a5:a0:2b:a2:74:44:ad:4c:55:db:c1:
         51:ed:63:bb:1c:77:36:30:75:46:83:05:67:39:61:85:5f:fb:
         f7:36:4c:c3:f6:14:31:42:28:c4:78:1e:f9:e0:3f:24:bb:78:
         77:2e:a7:e4:74:b5:e1:c9:35:4a:f9:96:86:e8:9d:fa:33:7d:
         b6:fb:c3:d2:95:71:fb:1b:9d:bc:80:13:6e:b4:3b:d1:66:bc:
         ac:ec:f8:1c:e6:04:f6:47:a0:60:0c:a2:fd:59:c6:24:0d:50:
         63:10:96:f9:fe:10:16:ad:32:4b:30:91:36:7b:b5:2e:b5:ee:
         50:4a:49:ec:23:46:ad:8b:a9:28:99:5b:94:18:63:af:31:c4:
         cd:dc:00:b4:9f:05:5d:88:3d:7d:b0:75:a8:5b:d7:f2:7e:ac:
         b9:4c:0e:d7:b9:bb:a4:cd:ee:b9:e6:9a:46:5d:8c:54:04:31:
         ec:2c:64:97:fe:f6:12:a3:00:d9:44:2e:c4:0b:b8:4a:6d:78:
         d1:bd:92:8b:0b:73:b1:39:70:ef:e8:44:ce:43:b7:c3:08:df:
         b7:81:71:e4:71:c4:eb:b4:6e:5f:b6:24:00:b1:39:2a:93:6c:
         b7:a1:eb:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:45:43 2025 by rpki-client